Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier: 5j0+maY2KgwSnoq8iJyEHGOwbjgRlQh02260P007W1c=
Subject key identifier: A4:27:01:EB:69:4B:B8:6E:8A:71:91:2A:18:F2:74:A9:E1:87:78:56
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer: /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial: 0196C2398FA9AF9FE2114AA56A9BB72DD34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 02:01:14 +0000
Manifest this update: Mon 12 May 2025 02:01:14 +0000
Manifest next update: Tue 13 May 2025 02:01:14 +0000
Files and hashes: 1: 5sx0qR-B9y6mGDgRbtSLnw5KGsw.roa (hash: Nyr6wmMl755m5pBB7dzD6+3NgxbHjvOEn2wkeXz+Yqw=)
2: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: 9BO6/1Rj10AfoafOGdz0zyiCOyhIX8DGn9S+aNQkFeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:8f:a9:af:9f:e2:11:4a:a5:6a:9b:b7:2d:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
Validity
Not Before: May 12 02:01:14 2025 GMT
Not After : May 13 02:01:14 2025 GMT
Subject: CN=a42701eb694bb86e8a71912a18f274a9e1877856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:0f:57:70:80:ea:a7:75:f3:94:4b:71:51:
e0:a5:21:4c:27:89:ca:c4:f2:1c:c7:be:fa:e5:53:
e1:a1:b8:b3:5a:4f:34:7b:42:0d:05:5f:1a:b9:2d:
00:1b:56:5d:a6:dd:6e:0b:2c:72:d5:ad:cd:52:38:
31:ab:69:e8:ba:48:cc:b6:26:3c:8c:28:a3:a1:d4:
ca:18:f1:72:9f:53:8f:ac:d6:92:7a:ff:a0:52:10:
98:cb:a5:9a:82:9d:56:a8:7f:41:b2:29:52:ef:74:
23:6b:11:d0:70:71:c4:85:7b:d4:4f:ba:6e:3b:65:
42:87:88:98:84:9e:e8:d8:0a:89:da:d6:33:3c:f6:
37:d9:e7:bd:06:40:6a:1d:e1:b5:d8:7b:11:06:b3:
3d:20:57:a1:4b:27:45:2e:3c:3b:d8:e9:ae:76:7c:
7f:b9:20:50:4a:36:1e:a3:ce:91:8b:ab:13:07:73:
09:99:97:96:26:c2:d3:94:12:82:58:01:d8:08:9f:
b8:af:71:4f:44:58:bf:df:b5:d6:76:d4:a3:7a:23:
d0:14:92:00:37:ed:19:8a:7f:1f:98:1a:17:44:5a:
5b:a4:0c:0c:6f:9a:9f:90:cb:4a:b2:44:6d:7c:8d:
ad:17:36:9b:ac:64:e8:8a:cb:ff:84:40:85:06:c5:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:27:01:EB:69:4B:B8:6E:8A:71:91:2A:18:F2:74:A9:E1:87:78:56
X509v3 Authority Key Identifier:
keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e0:f1:65:b9:bb:f4:95:33:34:f2:36:95:b9:a3:f5:81:55:
46:90:6d:e4:80:56:0d:5c:94:1b:fb:87:61:49:cb:64:2e:27:
45:90:8d:6a:c1:4d:67:23:78:60:bd:6b:99:68:a3:84:94:0d:
ca:46:c0:87:fb:af:be:3a:df:8b:bc:eb:d6:fb:95:44:63:36:
5a:4e:8f:0f:b7:ce:70:7b:79:e2:37:76:ac:a6:73:e6:6d:26:
2c:11:28:14:a1:7c:47:65:ed:af:05:db:93:e0:b2:fa:41:31:
9c:82:22:72:54:f4:aa:62:cc:89:3b:42:eb:52:f4:11:5a:b2:
c7:c7:51:3a:d2:e0:1c:4f:d6:3b:11:6d:72:53:23:63:6a:d1:
80:e0:5b:1f:97:76:30:fa:34:fb:0e:70:a3:24:9d:4a:bf:7b:
5d:73:a4:b9:ea:9d:fa:46:31:f9:d6:6f:2d:40:5e:37:21:19:
ce:ef:1c:0c:df:c7:2a:38:83:3c:65:cb:79:d1:c1:87:72:65:
9a:6e:0d:c8:02:d2:43:64:48:5d:f1:f8:b3:70:08:48:e8:8a:
82:56:02:e7:09:27:18:44:5e:a5:cd:fe:91:64:0d:f2:22:07:
40:08:11:9d:ac:43:64:b2:d7:80:b2:78:b4:1c:20:c2:ee:f1:
c1:81:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:09:46 2025 by rpki-client